WE CLAIM AS OUR INVENTION: 



1 . A method for protecting a security module, in which security-relevant data 




re stored, inserted 



on a device motherboard, comprising the steps of: 



with a 



monitoring proper insertion of said security module on said device motherboard 



irst function unit, a second function unit and a third function unit in 



said security module; 

detecting at lejast one of improper use and improper replacement of said security 
moduld with said second function unit and, upon a detection of at least 
one of said improper use and said improper replacement, said second 
function! unit causing said security-relevant data to be erased; 

during replacement of said security module, inhibiting functioning of said security 
module with said third function unit; 

following at least one of proper use and proper replacement of said security 
module, re-initializing, with said first function unit, any erased, security- 
relevant data; and 

after said re-initializing, enabling each of said first function unit, said second 
function urpit and said third function unit to re-commission said security 
module. 



2. A method 
comprises determining a 
security module by estat 
remote data source exch' 



as claimed in claim 1 wherein the step of re-initializing 
least one of said proper use and proper replacement of said 
lishing communication between said first function unit and a 
nging information between said first function unit and said 
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remote data source via currekt loop, and detecting that at least one of said proper use 



and proper replacement has 



occurred if said exchange of data takes place error-free. 



3. A security module for insertion on a device motherboard, comprising: 
a memory in which security-relevant data are stored; 

a voltage monitoring jnit which supplies an operating voltage to said memory to 
maintain said security-relevant data stored therein and which disconnects 
said memory from said voltage, thereby erasing said security-relevant 
data therein, i pon occurrence of a voltage level indicating at least one of 
improper use and replacement; 
an unplugged status detection unit which inhibits functioning of said security 
module during replacement of said security module and which has a self- 
holding capability, indicating that said security module has been replaced, 
which is triggered when a voltage level a test voltage line deviates from 
a predetermined voltage level; and 
a processor connected to said voltage monitoring unit and to said unplugged 

in unit to re-commission said security module after at least 
one of said improper use and replacement, by enabling said voltage 
monitoring unit and said unplugged status detection unit, including 
jnplugged status detection unit. 



status detectic 



resetting said 



4. A security 
detection unit comprises a 



mojdule as claimed in claim 3 wherein said unplugged status 
line and switch element for resetting said self-holding 
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capability, said switch element being triggered by a signal from said processor on said 



ine. 



5. A security module a$ claimed in claim 4 wherein said unplugged status 
detection unit comprises: 

a voltage divider comprising a series resistor circuit connected across a terminal 
for receiving a supply voltage, tapped by a capacitor, and a line having 
a test voltage thereon; 
a diode connected betwejen said terminal for receiving a supply voltage and said 
capacitor; 

a comparator having a ijion-inverting input, an inverting input connected to a 

source, and a comparator output; 
ng said voltage divider and connected to said non- 
inverting input of said comparator; 
said comparator output tpeing connected to a line at a voltage potential via an 

inverter; 
a switch element having 



reference voltage 
a further capacitor tapp 



a control input connected to said comparator output, 
said switch element producing said self-holding capability and being 
connected in parallel with a resistor of said voltage divider; and 

resetting said self-holding capability being connected 
age divider tap for said further capacitor, and ground. 



said switch element for 
between said vo 



-30- 





6. A security module as claimed in claim 5 further comprising an 
interrogation line connected between said processor and said unplugged status 
detection unit for interrogating a self-holding status of said unplugged status detection 
unit by said processor. 



7 . A secu rity mod u le 
voltage thereon is at ground 
connected to said com 
module is plugged into said 
when said security module is n 



as claimed in claim 6 wherein said line having said test 
potential, and wherein said line at a voltage potential 
parator obtput is at operating voltage potential when said security 
def/ice motherboard and is otherwise at ground potential 
Dt plugged into said device motherboard. 



8. A security module as claimed in claim 3 wherein said memory is contained 
in said processor and is at an operating voltage supplied from said voltage monitoring 
unit as long as said processor is supplied with system voltage, and wherein said 
processor has a terminal for resetting said self-holding capability of said unplugged 
status detection unit, and a furthpr terminal for interrogating a status of said unplugged 
status detection unit. 



9. A security modul^ 
connected to said processor vi 
group for connection to a systeifn 



as claimed in claim 8 further comprising an ASIC 
an internal data bus, said ASIC having a first contact 
bus of a device containing said device motherboard. 
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10. A security module as clajmed in claim 3 further comprising a printed circuit 



board on which said processor, said 
status detection unit are mechanica 
board having contact terminals for a 



voltage monitoring circuit and said unplugged 
y and electrically mounted, said printed circuit 
attery; 

a security module housing forrjned by a hard casting compound surrounding said 
printed circuit board arid said processor, said voltage monitoring circuit 
and said unplugged status detection circuit thereon, with said contact 
terminals being exposed to an exterior of said housing; 

a battery replaceably connected to said contact terminals outside of said 



housing; and 
said printed circuit board h 



avi 



of said housing, for 



ing a first contact group, accessible from outside 



communicating with a system bus of a device 
containing said device motherboard, and a second contact group 
accessible from an exterior of said housing for receiving system voltage, 
and at least one of said first contact group and said second contact group 
being connected to said unplugged status detection unit to monitor a 
plugged status of said security module. 



11. A security module as claimed in claim 1 0 wherein said processor includes 
terminals for monitoring said plugged status of said security module with lines forming 
a current loop when said security module is plugged into said device motherboard. 



-32- 



12. A security module as claimed in claim 3 wherein said processor has a 
terminal for emitting at least one s ignal identifying a status of said security module. 

13. A security module as claimed in claim 12 wherein said processor is 
connected to an input/output urit having input/output ports, and having at least one 
internal signaling element in saic security module connected to said input/output ports. 
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